QUIC uses TLS, so it's pretty much the same situation as any other TLS connection. Of course in a corporate environment you can trust the middlebox's CA on all

QUIC uses TLS, so it's pretty much the same situation as any other TLS connection. Of course in a corporate environment you can trust the middlebox's CA on all the work machines. That's actually fine. What everyone seems to hate here is middleboxes that don't terminate connections and try to mess with them in other ways.